Acrontum

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Acrontum records in CISA KEV

No Acrontum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Filesystem-template 1 record MEDIUM

Records

1 record in Filesystem-template · all components

TI-2022-05583 CVE-2022-21186 · GHSA-m2fc-9h5m-29cm

Arbitrary command injection in @acrontum/filesystem-template

MEDIUM 64

The package @acrontum/filesystem-template before 0.0.2 are vulnerable to Arbitrary Command Injection due to the fetchRepo API missing sanitization of the href field of external input.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.26074 Published 2022-08-05 Fixed in 0.0.2 CWE-77

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0